net.stickycode.deploy:sticky-deployer-tomcat8 (2.1), org.sakaiproject:sakai-dav-server (>=11.0, <=11.3) potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina-jmx-remote (>=8.0.20, <=8.0.32)

org.apache.tomcat:tomcat-catalina-jmx-remote MAVEN version =8.0.20, =11.0, =11.3 Source cves: CVE-2016-8735 Source advisory: OSV:GHSA-CW54-59PW-4G8C...

org.sakaiproject:sakai-dav-server (>=10.3, <=10.7), org.testatoo.container:testatoo-container-tomcat (>=1.0-rc1, <=1.0-rc2) potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina-jmx-remote (>=7.0.5, <=7.0.65)

org.apache.tomcat:tomcat-catalina-jmx-remote MAVEN version =7.0.5, =10.3, =1.0-rc1, =1.0-rc2 Source cves: CVE-2016-8735 Source advisory: OSV:GHSA-CW54-59PW-4G8C...

com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5), com.gantzgulch.tools:gantzgulch-tools-http (>=1.0.4, <=1.0.27) +39 more potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina (>=8.5.0, <=8.5.6)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.0, =1.0.0, =1.0.4, =1.9.5, =1.0.0-incubating, =8.5.0, =8.5.0, =8.5.0, =8.5.0, =7.0.0, =7.0.0, =7.0.0, =7.0.2 and more Source cves: CVE-2016-8735 Source advisory: OSV:GHSA-CW54-59PW-4G8C...

br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +195 more potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.72)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.0, =1.2 and more Source cves: CVE-2016-8735 Source advisory: GHSA-CW54-59PW-4G8C...

br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +195 more potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.72)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.0, =1.2 and more Source cves: CVE-2016-8735 Source advisory: OSV:GHSA-CW54-59PW-4G8C...

com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5), com.gantzgulch.tools:gantzgulch-tools-http (>=1.0.4, <=1.0.27) +39 more potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina (>=8.5.0, <=8.5.6)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.0, =1.0.0, =1.0.4, =1.9.5, =1.0.0-incubating, =8.5.0, =8.5.0, =8.5.0, =8.5.0, =7.0.0, =7.0.0, =7.0.0, =7.0.2 and more Source cves: CVE-2016-8735 Source advisory: GHSA-CW54-59PW-4G8C...

net.stickycode.deploy:sticky-deployer-tomcat8 (2.1), org.sakaiproject:sakai-dav-server (>=11.0, <=11.3) potentially affected by CVE-2016-8735 via org.apache.tomcat:tomcat-catalina-jmx-remote (>=8.0.20, <=8.0.32)

org.apache.tomcat:tomcat-catalina-jmx-remote MAVEN version =8.0.20, =11.0, =11.3 Source cves: CVE-2016-8735 Source advisory: GHSA-CW54-59PW-4G8C...

Mageia: Security Advisory (MGASA-2016-0417)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:3044-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:1660-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4557-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4557-1: Tomcat vulnerabilities

It was discovered that the Tomcat realm implementations incorrectly handled passwords when a username didn't exist. A remote attacker could possibly use this issue to enumerate usernames. CVE-2016-0762 Alvaro Munoz and Alexander Mirosh discovered that Tomcat incorrectly limited use of a certain...

Apache Tomcat Remote Code Execution (CVE-2016-8735)

A remote code execution vulnerability exists in Apache Tomcat. Successful exploitation of this vulnerability could result in execution of arbitrary code on the affected system...

CVE-2019-8735

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8735

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8735

CVE-2019-8735 involves multiple memory corruption issues in WebKit-derived components. The Initial document states the vulnerability could be triggered by processing malicious web content, with potential for arbitrary code execution, and that fixes arrive in: tvOS 13 , iTunes for Windows 12.10.1 ...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2591)

This update for webkit2gtk3 to version 2.26.2 fixes the following issues : Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed : - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2587)

This update for webkit2gtk3 to version 2.26.2 fixes the following issues : Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed : - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead...

OPENSUSE-SU-2019:2591-1 Security update for webkit2gtk3

This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead t...

About the security content of Safari 13 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...